use agenix

modules/services/gotosocial.nix

@@ -1,6 +1,7 @@
 { config, lib, ... }:
 let
   cfg = config.modules.services.gotosocial;
+  secrets = config.age.secrets;
   domain = config.networking.domain;
   fqdn = "${cfg.subdomain}.${domain}";
   port = cfg.port;
@@ -24,7 +25,7 @@ in
   config = lib.mkIf cfg.enable {
     services.gotosocial = {
       enable = true;
-      environmentFile = "/var/secrets/gotosocial.env";
+      environmentFile = secrets.gotosocial.path;
       settings = {
         host = fqdn;
         account-domain = domain;